commit f6106361f157892c2bf9cfcb6fcd79546da517c4
author Dennis Shen <dzshen@google.com> Fri May 17 17:24:20 2024 +0000
committer Dennis Shen <dzshen@google.com> Mon May 20 00:44:56 2024 +0000
tree 7ce61c9d8fc52d4a9089739e0258351df173a107
parent 18eb855a0ff9e2534992a6b5687af61e2a8d573e

selinux: allow aconfig to read /aepx

Bug: b/312444587
Test: m and avd
Change-Id: I6ac81dd211ad7669952f97f9541c44e14680bec6

private/aconfigd.te

diff --git a/private/aconfigd.te b/private/aconfigd.te
index 60559fc..97e7493 100644
--- a/private/aconfigd.te
+++ b/private/aconfigd.te
@@ -37,3 +37,7 @@
 # allow aconfigd to read vendor partition storage files
 allow aconfigd vendor_aconfig_storage_file:file r_file_perms;
 allow aconfigd vendor_aconfig_storage_file:dir r_dir_perms;
+
+# allow aconfigd to read /apex dir
+allow aconfigd apex_mnt_dir:dir r_dir_perms;
+allow aconfigd apex_mnt_dir:file r_file_perms;